Information We Collect

When you reach out to us for corporate flower arrangements or gift services, we collect data you choose to share. This may include your name, company name, email address, phone number, delivery addresses, and specific floral requirements. We also gather payment details when you place orders, though these are processed securely via our payment partners.

For corporate clients, we may collect additional business details such as company registration information, preferred delivery times, and budget considerations to tailor our service to your needs.

Our website automatically captures certain technical data when you visit, including your IP address, browser type, device information, and how you navigate the site. We use this information to improve site performance and understand how clients discover our services.

How We Use Your Information

We primarily use your personal data to fulfill orders and deliver excellent customer service. This involves processing orders, organizing deliveries, sending confirmations, and following up to ensure satisfaction.

• Processing and fulfilling your flower orders and gift arrangements
• Communicating about order status and delivery timings
• Providing customer support and responding to inquiries
• Improving our services based on your feedback and preferences
• Sending relevant updates about our services (with your consent)
• Maintaining records for business and legal compliance

We also classify aggregated, non-personal data to analyze market trends and enhance our operations. For example, we may examine which types of arrangements are most popular across seasons to better prepare inventory.

With your explicit consent, we may share information about seasonal offerings, special promotions, or new services that could interest your business. You can opt out at any time via the unsubscribe link in our emails or by contacting us directly.

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data stays within our business ecosystem and is shared only when necessary to deliver our services or meet legal obligations.

We collaborate with trusted service providers who assist in delivering our services, including payment processors, delivery partners, and flower suppliers. These partners are contractually obliged to safeguard your information and use it solely for the services they provide to us.

We may disclose your information if required by United Kingdom law, court orders, or government regulations. This includes compliance with GST regulations, business licensing, and other legal obligations applicable to our operations in London and across United Kingdom.

Data Security and Protection

We treat data security seriously and implement multiple protective layers. Our systems use encryption for sensitive data transmission, secure servers for storage, and regular security updates to guard against threats.

Physical security measures protect our office systems, and access to personal information is limited to employees who need it for their duties. Our team receives ongoing training on privacy practices and data handling.

Payment information is processed through secure, encrypted systems that comply with industry standards. We do not store full credit card numbers on our systems—the data is handled by certified payment processors specializing in secure transactions.

While we maintain strong security measures, no system is completely risk-free. We continuously monitor and update our security practices to address evolving threats and uphold the highest protection standards.

Your Rights and Choices

You have several rights regarding your personal information. You may request to view what we hold about you, ask us to correct inaccurate data, or request deletion of your information when legally permissible.

• Access your personal information and understand how we use it
• Request corrections to inaccurate or outdated information
• Ask us to delete your personal information (subject to business and legal requirements)
• Opt out of marketing communications while continuing to receive service-related messages
• Request information about how your data has been shared
• File complaints about our privacy practices

We retain your information only as long as necessary for business purposes and legal obligations. Order records are kept for accounting and warranty purposes, while marketing preferences remain until you request removal.

When information is no longer needed, we securely delete or anonymize it. Some data may be retained longer if required by United Kingdom law or for legitimate business interests like fraud prevention.

Cookies and Website Technology

Our website uses cookies to enhance your browsing experience and help us understand how visitors use our site. Cookies are small files stored on your device that remember preferences and enable certain website features.

Essential cookies are necessary for proper site functionality, enabling basic navigation and access to secure areas. These cookies do not collect personally identifiable information and are activated by default when you use our site.

We employ analytics cookies to learn how visitors interact with our site. This helps us identify popular content, optimize page performance, and improve the user experience. The data is collected in aggregate form and does not identify individuals.

You can adjust cookie settings through your browser preferences. Note that disabling certain cookies may affect some site features and your overall experience.

Business Transfers and Changes

If HarvestGroveSpruce undergoes significant business changes such as mergers, acquisitions, or asset sales, your personal information may be transferred as part of the transaction. We will notify you of such changes and ensure your data remains protected under privacy standards aligned with this policy.

In the unlikely event we cease operations, we will ensure your data is securely transferred to a successor entity (with appropriate privacy protections) or securely deleted according to data protection best practices.

Updates to This Privacy Policy

We may periodically update this privacy policy to reflect changes in our practices, services, or legal obligations. When substantial changes occur, we will notify you via email or post a notice on our website before they take effect.

Minor updates to improve clarity or administrative details may occur without prior notice. We encourage you to review this policy periodically to stay informed about how we safeguard your privacy.

Children's Privacy

Our services are intended for businesses and adult consumers. We do not knowingly collect personal information from individuals under 18. If we learn that we have unintentionally collected data from someone under 18, we will promptly remove that information from our systems.

Parents or guardians who believe we may have collected information from their child can contact us using the details below, and we will address the matter promptly.

International Data Considerations

Our primary operations are based in United Kingdom, and data is stored and processed within United Kingdom jurisdiction. Some service providers may process data internationally. When this occurs, we implement appropriate safeguards to protect your information in line with relevant privacy laws.

We comply with United Kingdom data protection regulations related to business operations, financial transactions, and handling of customer data. Our practices align with evolving privacy standards in United Kingdom's digital economy.